Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F739388C47AC6219CE828C343D32DAEF258ED38D30FD8640DF38854FA3150FA6/0/323830333a313939303a3a2f33322d3438203d3e20323732393533.roa
File:                     323830333a313939303a3a2f33322d3438203d3e20323732393533.roa (raw, json)
Hash identifier:          PS0/En50o7qhu8a9L2KNXV6Q3jAT85mzNZEaBEMGsWE=
Subject key identifier:   62:63:DA:8C:F5:D1:30:A3:D3:16:30:BB:D0:18:D3:DC:72:86:49:EB
Certificate issuer:       /CN=11A5C34E7E1C4ADBCBB37D8077C2836D1BF63203
Certificate serial:       5A866A870EB30F88C32BBF465F79D715E1B82E17
Authority key identifier: 11:A5:C3:4E:7E:1C:4A:DB:CB:B3:7D:80:77:C2:83:6D:1B:F6:32:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11A5C34E7E1C4ADBCBB37D8077C2836D1BF63203.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F739388C47AC6219CE828C343D32DAEF258ED38D30FD8640DF38854FA3150FA6/0/323830333a313939303a3a2f33322d3438203d3e20323732393533.roa
Signing time:             Mon 28 Jul 2025 20:34:13 +0000
ROA not before:           Mon 28 Jul 2025 20:29:13 +0000
ROA not after:            Mon 27 Jul 2026 20:34:13 +0000
asID:                     272953
IP address blocks:        2803:1990::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F739388C47AC6219CE828C343D32DAEF258ED38D30FD8640DF38854FA3150FA6/0/11A5C34E7E1C4ADBCBB37D8077C2836D1BF63203.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F739388C47AC6219CE828C343D32DAEF258ED38D30FD8640DF38854FA3150FA6/0/11A5C34E7E1C4ADBCBB37D8077C2836D1BF63203.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11A5C34E7E1C4ADBCBB37D8077C2836D1BF63203.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 05 Aug 2025 13:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:86:6a:87:0e:b3:0f:88:c3:2b:bf:46:5f:79:d7:15:e1:b8:2e:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11A5C34E7E1C4ADBCBB37D8077C2836D1BF63203
        Validity
            Not Before: Jul 28 20:29:13 2025 GMT
            Not After : Jul 27 20:34:13 2026 GMT
        Subject: CN=6263DA8CF5D130A3D31630BBD018D3DC728649EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3b:96:9a:a3:7a:02:e8:68:67:f6:11:63:eb:
                    ff:dd:5d:e4:74:66:44:d4:00:f7:8c:e8:8d:0b:4a:
                    6e:c8:2f:bc:0a:43:79:4e:71:a7:58:fd:83:06:a3:
                    73:87:d9:2e:96:6d:7f:b7:56:cb:05:33:9b:c3:14:
                    4f:e7:65:12:b3:58:42:22:3b:de:e9:54:30:2f:be:
                    8c:17:49:27:3d:76:6c:a1:3f:df:e9:9c:df:22:a9:
                    06:8f:13:3b:be:9b:7e:14:9a:7a:19:31:1a:72:9d:
                    56:02:81:bb:dc:df:ec:14:20:81:86:42:04:35:8b:
                    85:d2:64:d0:6a:b4:bd:d7:dc:ff:da:04:9f:e3:f0:
                    13:5c:19:8a:78:8d:98:51:20:8b:82:91:ab:b7:b7:
                    d6:d2:c1:79:40:02:68:94:40:41:0b:ee:e9:ee:52:
                    27:a6:f8:ff:2a:7e:fe:80:11:09:af:3b:94:c3:1b:
                    ff:50:92:dc:d1:48:5c:9f:7c:f0:f7:4c:a0:76:7a:
                    f5:d9:e1:92:b2:24:16:51:55:b5:59:96:f4:ba:79:
                    73:66:e0:fd:57:83:f9:81:4d:7c:34:87:18:ce:4c:
                    ee:d8:d4:7f:b9:64:30:78:33:6d:17:db:a2:1f:a5:
                    99:e3:15:2f:4b:b7:a5:d2:cd:f0:08:0a:1c:15:05:
                    90:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:63:DA:8C:F5:D1:30:A3:D3:16:30:BB:D0:18:D3:DC:72:86:49:EB
            X509v3 Authority Key Identifier:
                keyid:11:A5:C3:4E:7E:1C:4A:DB:CB:B3:7D:80:77:C2:83:6D:1B:F6:32:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F739388C47AC6219CE828C343D32DAEF258ED38D30FD8640DF38854FA3150FA6/0/11A5C34E7E1C4ADBCBB37D8077C2836D1BF63203.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11A5C34E7E1C4ADBCBB37D8077C2836D1BF63203.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F739388C47AC6219CE828C343D32DAEF258ED38D30FD8640DF38854FA3150FA6/0/323830333a313939303a3a2f33322d3438203d3e20323732393533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1990::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:12:b9:72:30:b2:92:42:bd:95:56:ef:45:48:77:76:26:78:
         76:84:f9:01:7f:56:06:c3:0a:e8:48:9e:1d:a7:82:7b:61:08:
         41:12:ff:a0:b1:ff:dc:90:53:97:fe:21:84:e8:b9:4a:44:21:
         44:f0:30:e0:b4:6b:ce:85:30:da:00:51:45:7d:5a:1f:08:3f:
         22:6b:34:31:87:7f:36:76:bf:35:94:ed:51:76:ea:28:ad:a8:
         c5:4d:a0:a7:cb:66:41:4e:04:46:00:32:ca:36:a8:d6:5b:98:
         d6:6c:12:cb:19:d2:e8:8f:6d:25:78:5b:2f:2b:94:44:af:c9:
         7b:d6:8a:5f:56:93:77:ec:5b:92:cd:4d:70:d8:62:98:d9:66:
         fb:26:75:10:72:c8:a1:6d:b5:ef:29:16:13:e8:72:be:6f:20:
         23:b3:74:14:98:7a:36:0a:5b:6b:2d:45:03:f3:64:98:8c:7d:
         8b:f7:63:62:c7:28:0b:04:78:39:97:55:fb:cc:61:b9:8e:7f:
         55:c8:e5:39:01:80:c7:26:91:85:a4:8b:d7:f0:0b:d8:f0:28:
         24:bb:06:65:28:3f:22:3b:a5:ec:dc:ce:8c:d1:18:b1:23:3e:
         f7:cd:c3:60:f4:21:5e:70:07:99:e9:a2:13:4a:26:7b:5c:63:
         59:63:ac:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:19:59 2025 by rpki-client